The hardware is identical. Both models use the same NP7 and CP9 processors, the same 1U chassis, and the same port configuration. The 901G adds two 480 GB onboard SSDs for local logging, reporting, and analytics. If you want on-box log storage without a separate FortiAnalyzer deployment, the 901G is the right choice. If you forward logs to FortiAnalyzer or a SIEM already, the 900G covers the same workload at a lower hardware cost.

The 900G series targets enterprise headquarters, campus core, and data center edge deployments. At 164 Gbps firewall throughput and 16 million concurrent sessions, it handles large internal segmentation workloads, high-speed encrypted traffic inspection, and aggregated branch traffic from distributed sites. It is the logical step up from the FortiGate 600F for organizations that have outgrown a mid-range platform and are not yet ready for the datacenter-class 3000F.

Yes. Secure SD-WAN is built directly into FortiOS on every FortiGate model, including the 900G and 901G. No additional license is required to activate it. The feature set includes application-aware link steering, automatic failover, bandwidth bonding, and self-healing path selection. The 900G is well-suited as an SD-WAN hub aggregating traffic from large numbers of branch FortiGates.

Firewalls.com bundles the 900G and 901G with UTP (Unified Threat Protection) and Enterprise Protection subscriptions in 1, 3, and 5 year terms. UTP covers IPS, antivirus, web filtering, application control, and antispam. Enterprise Protection adds AI-based inline malware prevention, inline CASB, data loss prevention, attack surface security, and DNS and video filtering. Our engineers can help you select the right bundle based on your compliance requirements and security stack.

Yes. Fortinet FortiManager provides centralized policy management, configuration templates, and firmware orchestration across large FortiGate deployments. FortiAnalyzer handles logging, reporting, and analytics separately. If you prefer not to run a dedicated log management platform, the 901G stores logs on-box. Firewalls.com engineers can also configure the 900G or 901G before it ships as part of our professional services, so your team receives an appliance that is ready to deploy.